$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa File: 0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa (raw, json) Hash identifier: 63e9cSwbjVja7w2n/nkr4KeRobvt/B7Vm7gC5l5IlfY= Subject key identifier: E8:63:4C:DC:76:63:52:45:AA:D2:04:4C:28:F1:40:FC:EF:31:72:4A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B9B7C50339EB0417AF5056C80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa Signing time: Wed 22 Oct 2025 15:08:28 +0000 ROA not before: Wed 22 Oct 2025 15:08:28 +0000 ROA not after: Tue 20 Jan 2026 16:08:28 +0000 asID: 23473 IP address blocks: 68.234.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:7c:50:33:9e:b0:41:7a:f5:05:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 22 15:08:28 2025 GMT Not After : Jan 20 16:08:28 2026 GMT Subject: CN=87ac76b6-9990-4c8b-a66d-4ff8528f22fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:03:ce:6c:20:ef:2e:b1:5b:a3:69:c4:84: 6f:6b:8b:e1:29:f4:11:89:49:c4:92:35:ac:47:b9: 5a:41:dd:b8:2e:2b:dc:77:f9:24:c4:80:9a:50:eb: 61:d1:16:be:7a:b9:65:92:df:0c:e6:93:47:d3:a5: 97:06:5f:41:b5:6c:e2:fe:17:c1:a8:22:c9:73:cb: 5a:37:ac:13:46:77:f7:45:3a:bd:b7:38:d8:e2:ba: d1:de:b0:68:28:b4:b0:c1:a1:13:be:96:3f:b2:9d: 3c:4a:20:9e:5e:3d:2b:9e:01:3a:9d:5e:7b:72:2a: d1:ae:88:37:38:2b:68:bf:02:f3:6d:19:63:f4:a5: 98:62:bb:9c:1b:ec:19:ab:68:5a:28:b4:a3:fe:4b: 4f:c9:3b:5f:04:4c:42:e2:3d:21:83:36:4a:bd:86: d7:7b:11:c5:2b:84:b0:1a:4a:d3:de:89:ab:01:76: ab:3d:4d:a9:e8:0e:bf:1e:c9:12:61:ad:b5:68:a7: 5d:dc:be:65:fd:53:73:bf:84:b0:05:f6:2b:03:05: 32:fe:88:68:d7:2d:06:b6:2e:9e:9a:c2:28:ba:b3: 16:08:54:8f:b6:3b:4c:bf:9a:73:e6:a7:22:c6:48: 04:da:f0:a3:64:9a:34:36:5b:67:a1:e4:c0:3a:e0: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:63:4C:DC:76:63:52:45:AA:D2:04:4C:28:F1:40:FC:EF:31:72:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d7:da:0f:0e:77:55:4f:e4:2b:78:e5:52:fa:aa:3e:62:bc: bc:f6:12:9a:6a:f6:f6:9b:59:88:97:59:b5:a8:b3:c4:f7:e1: 6c:33:f5:f1:a8:a2:13:9e:ee:9e:e7:4e:0e:73:1d:92:62:b6: 51:62:56:0f:23:93:01:d0:0b:6f:9b:85:23:17:dd:a6:63:be: 44:6a:a0:f4:93:d1:4b:79:54:5b:2c:5e:c1:e0:f2:29:4c:05: 53:a7:d7:b6:4f:4c:60:f6:9c:b8:53:03:3e:98:c5:bb:25:32: 7d:d8:76:17:c1:7c:6e:f2:4e:74:bf:c0:53:c1:cb:97:97:d2: cb:50:b0:0f:86:b5:1c:5e:da:3e:25:b6:b4:77:fc:5f:d3:a9: e8:d0:a8:ab:dc:d5:eb:a6:1c:4e:b7:2d:a0:82:29:86:ab:2b: e5:d1:87:0d:b9:83:01:5e:db:79:80:09:bf:68:af:e9:54:71: 68:7c:51:1a:ae:5e:28:d8:c3:f2:74:0a:ec:17:86:65:91:1c: 8a:e4:af:73:dc:4b:82:f6:aa:b6:af:a5:d1:e2:61:91:7e:dc: ea:24:b9:d0:2e:5b:87:61:9c:08:30:38:ff:72:e2:67:c4:8b: 91:03:0d:98:bd:a2:5b:32:8c:0d:0c:70:ab:b2:65:e4:a5:b8: bb:2b:c1:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubfFAznrBBevUFbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyMjE1MDgyOFoXDTI2MDEyMDE2MDgyOFowLzEtMCsGA1UEAxMk ODdhYzc2YjYtOTk5MC00YzhiLWE2NmQtNGZmODUyOGYyMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwDzmwg7y6xW6NpxIRva4vhKfQRiUnEkjWs R7laQd24Livcd/kkxICaUOth0Ra+erllkt8M5pNH06WXBl9BtWzi/hfBqCLJc8ta N6wTRnf3RTq9tzjY4rrR3rBoKLSwwaETvpY/sp08SiCeXj0rngE6nV57cirRrog3 OCtovwLzbRlj9KWYYrucG+wZq2haKLSj/ktPyTtfBExC4j0hgzZKvYbXexHFK4Sw GkrT3omrAXarPU2p6A6/HskSYa21aKdd3L5l/VNzv4SwBfYrAwUy/oho1y0Gti6e msIourMWCFSPtjtMv5pz5qcixkgE2vCjZJo0NltnoeTAOuBuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhjTNx2Y1JFqtIETCjxQPzvMXJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGVjZDdkNjctZTFmNS0z ZGE2LWI5ZjctMTEzNGUyMzViZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXX2g8Od1VP5Ct45VL6qj5ivLz2Eppq9vabWYiXWbWos8T34Wwz9fGo ohOe7p7nTg5zHZJitlFiVg8jkwHQC2+bhSMX3aZjvkRqoPST0Ut5VFssXsHg8ilM BVOn17ZPTGD2nLhTAz6YxbslMn3YdhfBfG7yTnS/wFPBy5eX0stQsA+GtRxe2j4l trR3/F/TqejQqKvc1eumHE63LaCCKYarK+XRhw25gwFe23mACb9or+lUcWh8URqu XijYw/J0CuwXhmWRHIrkr3PcS4L2qravpdHiYZF+3OokudAuW4dhnAgwOP9y4mfE i5EDDZi9olsyjA0McKuyZeSluLsrwSk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:38 2025 by rpki-client